Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/SDD1Gni6ytoQ92vWrucH0cPREf4.roa
File:                     SDD1Gni6ytoQ92vWrucH0cPREf4.roa (raw, json)
Hash identifier:          rE7NcYW6GxVm+zaPzHIMOI8YxL/0fT+sasv/D9yRmNQ=
Subject key identifier:   48:30:F5:1A:78:BA:CA:DA:10:F7:6B:D6:AE:E7:07:D1:C3:D1:11:FE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       011E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SDD1Gni6ytoQ92vWrucH0cPREf4.roa
Signing time:             Tue 06 Sep 2022 04:18:50 +0000
ROA not before:           Tue 06 Sep 2022 04:18:50 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        14.9.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Sep  6 04:18:50 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=4830F51A78BACADA10F76BD6AEE707D1C3D111FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:dc:10:5b:b2:c1:51:06:72:3a:8b:80:28:
                    1a:88:09:8b:ee:f1:85:6b:c5:86:b2:80:05:8e:27:
                    9b:ec:31:57:dd:c0:dc:2d:0f:14:20:9b:60:60:24:
                    35:cd:df:05:42:5d:1d:a5:22:91:0e:c8:e3:1f:c0:
                    5d:28:c6:2e:7a:6a:9c:6f:88:24:03:b8:14:0a:00:
                    35:25:ef:6d:01:09:bf:80:ea:d1:75:f2:e6:e4:f8:
                    6b:a6:e7:53:cc:9b:a1:8d:61:5b:94:13:57:d3:6d:
                    00:6a:72:ae:e3:03:35:90:40:81:b4:52:1a:65:6a:
                    fc:9b:fd:42:7c:d4:a9:55:ca:87:e8:61:ba:91:bc:
                    b0:18:a5:80:fe:e0:ee:66:20:cb:f8:ce:6f:19:23:
                    4a:5a:f3:ff:bd:9d:cc:ad:14:83:51:a9:4e:0f:d4:
                    27:af:21:cd:2e:10:d0:87:fe:af:57:16:33:e4:b0:
                    42:72:b9:6e:6a:10:9a:39:23:41:dd:ec:32:b4:c5:
                    ec:03:dc:c7:b2:79:6a:6c:6d:62:24:dd:53:a3:4b:
                    34:37:d9:98:db:99:74:20:c4:44:1b:54:78:f6:7f:
                    6d:ed:cc:08:1f:a6:24:d3:37:da:bd:ba:ad:22:bb:
                    2d:80:cb:85:fc:27:16:eb:2e:5d:c8:f6:25:e1:06:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:30:F5:1A:78:BA:CA:DA:10:F7:6B:D6:AE:E7:07:D1:C3:D1:11:FE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SDD1Gni6ytoQ92vWrucH0cPREf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.9.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:19:7a:2b:f2:b5:2b:f3:ee:b0:ae:a6:3b:8b:41:75:78:
         bc:10:bb:02:32:37:06:d7:ed:f6:68:02:21:9e:58:2c:82:ba:
         6d:6c:7c:bf:d9:3f:b4:16:32:e9:28:84:8f:28:97:61:6b:69:
         c2:03:c7:6f:4b:7f:22:b1:da:f3:d9:9e:00:69:8f:7e:31:95:
         86:ab:ff:17:a9:85:43:e2:59:cf:dc:44:47:32:bf:4a:43:bc:
         44:1d:a5:8d:2b:44:4b:65:23:cc:fb:6e:71:91:51:66:4b:bb:
         e4:61:33:87:3d:ab:ee:82:7d:97:ba:1c:fc:eb:6a:de:c7:64:
         8d:51:3b:81:c4:0c:86:99:b0:69:16:96:26:06:33:ea:29:2d:
         b0:e6:2e:36:89:4c:2c:f5:ea:2b:e8:e1:72:70:e1:b7:7a:47:
         59:31:1c:8c:c9:6b:78:25:da:5d:bf:a6:ea:83:75:e3:8a:a9:
         8c:a2:8b:64:6f:46:9f:ab:ec:a2:38:e5:9a:20:5e:9d:d2:43:
         aa:c0:4d:ae:45:0f:67:fd:04:7b:86:63:ed:2a:94:52:82:70:
         a7:a3:db:f6:c1:01:1d:04:90:ac:18:72:c9:c3:bc:1f:f2:74:
         d1:0e:b8:fe:e7:ef:94:81:e3:d6:98:98:b7:31:ae:8c:82:e6:
         50:b7:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org